Cookie Values Used in Anti-CSRF Token

Severity:

Low

Summary

Invicti identified a cookie used as Anti-CSRF Token.

Impact

During a cross-site scripting attack, an attacker might easily access cookies and hijack the victim's session even if cookie is marked as HttpOnly. If the cookie is not the session cookie you can ignore this issue.

Remediation

Avoid the usage of session cookie as Anti-CSRF Token.

Required Skills for Successful Exploitation

Actions To Take

Classifications

Vulnerability Index

You can search and find all vulnerabilities

Select Category

Select Vulnerability

Related Vulnerabilities

Version Disclosure (CakePHP Framework)

Out-of-date Version (React)

Out-of-date Version (Lodash)

WordPress Plugin Jupiter X Core Out Of Date

WordPress Theme Shop4u Out Of Date

Cookie Values Used in Anti-CSRF Token

Vulnerability Index

Select Category

Select Vulnerability

Featured resources

Build your resistance to threats. And save hundreds of hours each month.